CVE-2023-35182
HIGHSolarwinds Access Rights Manager - Insecure Deserialization
Title source: ruleDescription
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.
Scores
CVSS v3
8.8
EPSS
0.0464
EPSS Percentile
89.1%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (1)
solarwinds/access_rights_manager
< 2023.2.0.73
Timeline
Published
Oct 19, 2023
Tracked Since
Feb 18, 2026